IN THE CLAIMS 

1 1. [Cancelled] 

1 2. [previously amended] A method according to claim 8, further comprising: 

2 - when processing at least one captured data packet, determining a 

3 modification command affecting said at least one captured data packet, and 

4 - maintaining a list of modification commands, said list enabling modification 

5 of captured data packets. 

1 3. [previously amended] A method according to claim 2, further comprising: 

2 - modifying captured data packets based on said list of modification 

3 commands, and 

4 - releasing modified captured data packets. 

1 4. [previously amended] A method according to claim 8, further comprising the step of 

2 discarding captured data packets that are declined from processing. 

1 5. [previously amended] A method according to claim 8, wherein captured data packets that 

2 are declined from processing are delayed . 

1 6. [previously amended] A method for handling data packets, said data packets belonging 

2 to a set of data packets, said method comprising: 

3 - capturing data packets, 

4 * - accepting a captured data packet for processing based on said captured 

5 data packet and data packets captured prior to said captured data packet, 

6 - when processing at least one captured data packet accepted for 
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7 processing, determining a modification command affecting at least said at least one 

8 captured data packet, 

9 - maintaining a list of modification commands, said list enabling modification 

10 of captured data packets, 

11 - declining a captured data packet from processing T if said captured data 

1 2 packet is already processed and modification commands induced by said captured 

1 3 data packet are already determined and maintained in said list of modification 

1 4 commands, 

15 - modifying said captured data packet based on said list of modification 

16 commands, and 

17 - releasing the modified captured data packet. 

1 7. [previously amended] A method according to claim 8, further comprising: 

2 - declining a captured data packet from processing, if said captured data 

3 packet is already processed, and 

4 - releasing the captured data packet. 

1 8. [previously amended] A method for handling data packets, said data packets belonging 

2 to a set of data packets having at least partly hierarchical structure, said method comprising: 

3 - capturing data packets, 

4 - accepting a captured data packet for processing or declining a captured 

5 data packet from processing based on said captured data packet and data packets 

6 captured prior to said captured data packet, 

7 - said accepting comprising accepting data packets for processing in the 

8 order specified by said at least partly hierarchical structure 

9 - declining a captured data packet from processing if a data packet 
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10 immediately preceding said captured data packet in said at least partly hierarchical 

1 1 structure is not yet captured, 

1 2 - delaying data packets declined from processing, 

1 3 - accepting a delayed data packet for processing and processing said 

1 4 delayed data packet, if data packet(s) immediately preceding said delayed data 

1 5 packet in said at least partly hierarchical structure is(are) already processed, and 

1 6 - releasing the delayed data packet. 

1 9. [previously amended] A method according to claim 8, comprising: 

2 - accepting a captured data packet for processing, if data packet(s) 

3 immediately preceding said captured data packet in said at least partly hierarchical 

4 structure is(are) already processed. 

1 10. [Cancelled] 

1 11. [Cancelled] 

1 12. [currently amended] A method according to claim 8, comprising! 

2 - delaying data packets declined from processing, 

3 - accepting a captured data packet for processing, 

4 - accepting delayed data packet(s) for processing, if data packet(s) 

5 immediately preceding said delayed data packet(s) in said at least partly hierarchical 

6 structure is(are) accepted for processing, 

7 - processing said delayed data packet(s) together with said captured data 

8 packet, and 

9 - releasing the delayed and the captured data packets. 
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1 13. [previously amended] A method according to claim 8, wherein said at least partly 

2 hierarchical structure is a sequence of data packets. 

1 14. [previously amended] A method according to claim 8, wherein in that said at least partly 

2 hierarchical structure is a hierarchically structured tree. 

1 15. [Cancelled] 

1 16. [previously amended] A method for handling data packets, said data packets belonging 

2 to a set of data packets and forming a plurality of groups of data packets, said method 

3 comprising: 

4 - capturing data packets, 

5 - declining a captured data packet belonging to a first group of data packets 

6 from processing, if all other data packets belonging to said first group of data packets 

7 are not yet captured, and delaying said captured data packet, and 

8 - processing a captured data packet belonging to a first group of data 

9 packets together with delayed data packets belonging to said first group of data 

10 packets if said captured data packet belonging to said first group and said delayed 

1 1 data packets belonging to said first group form a full first group of data packets. 

1 17. [preveiously amended] A method according to claim 16, wherein said plurality of 

2 groups of data packets further belong to a set of groups having at least partly hierarchical 

3 structure, and further comprising 

4 - processing said groups of captured data packets in the order specified by 

5 said at least partly hierarchical structure. 
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1 18. [previously amended] A method according to claim 6, wherein said data packets 

2 belonging to a set of data packets are first handled in a first node of a cluster of network 

3 elements and said list of modification commands is maintained in said first node, and in that 

4 said method further comprises the step of: 

5 - transmitting said list of modification commands from said first node to a 

6 second node of said cluster of network elements, 

1 19. [previously amended] A method according to claim 18, further comprising: 

2 - after said transmission of said list, handling said set of data packets in said 

3 second node. 

1 20. [previously amended] A method according to claim 19, further comprising: 

2 - when beginning to handle said data packets, storing in said first node in a 

3 connection data structure an entry representing said set of data packets, and 

4 - before handling said set of data packets in said second node, transmitting 

5 said entry from said first node to said second node. 

1 21 . [previously amended] A method according to claim 6 further comprising: 

2 - defining a plurality of first pieces of information which are to be replaced in 

3 the captured data packets with a plurality of corresponding second pieces of 

4 information, 

5 and wherein, in the processing of captured data packets, 

6 - said first pieces of information are searched for, and 

7 - if a first piece of information is found, at least one modification command 

8 specifying at least the replacement of said first piece of information with a 
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9 corresponding second piece of information is determined. 

1 22. [previously amended] A method according to claim 21, wherein, if the length of said 

2 first piece of information is different from the length of said corresponding second piece of 

3 information and if said first piece of information is found in payload of data packet(s), said 

4 modification command comprises instructions for changing value of at least one header field 

5 in a data packet. 

1 23. [currently amended] A method according to claim 6, wherein a modification command 

2 comprisesi 

3 - a first identifier indicating the beginning of a first piece of information in the 

4 original captured data packets, the first piece of information being subject to be 

5 replaced by a second piece of information, 

6 - the length of the first piece of information, and 

7 - the second piece of information. 

1 24. [previously amended] A method for handling data packets, said data packets 

2 belonging to a set of data packets, said method comprising: 

3 - capturing data packets, 

4 - accepting a captured data packet for processing based on said captured 

5 data packet and data packets captured prior to said captured data packet, 

6 - when processing at least one captured data packet accepted for 

7 processing, determining a modification command affecting at least said at least one 

8 captured data packet, 

9 - maintaining a list of modification commands, said list enabling modification 
10 of captured data packets, 
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1 1 wherein a modification command comprises 

12 - a first identifier indicating the beginning of a first piece of information in the 

1 3 original captured data packets, the first piece of information being subject to be 

1 4 replaced by a second piece of information, 

15 - the length of the first piece of information, 

16 - the second piece of information, 

17 - a second identifier indicating the beginning of the second piece of 

1 8 information in the modified captured data packets, 

19 - an offset between a third identifier indicating the end of the first piece of 

20 information in the original captured data packets and a fourth identifier indicating the 

21 end of the second piece of information in the modified captured data packets, and 

22 - the length of the second piece of information. 

1 25. [previously amended] A method according to claim 6, wherein said data packets 

2 contain information fragments belonging to a sequence of information fragments, said 

3 method further comprising the steps of: 

4 - processing the information fragments of the captured data packets in the 

5 order specified by said sequence. 

1 26. [previously amended] A method according to claim 25, wherein each information 

2 fragment of said sequence is processed only once. 

1 27. [previously amended] A method for handling data packets, said data packets 

2 belonging to a set of data packets, said method comprising: 

3 - capturing data packets, said data packets containing information fragments 

4 belonging to a sequence of information fragments, 
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5 - declining a captured data packet from processing if a data packet 

6 containing the information fragment immediately preceding the information fragments 

7 of said captured data packet in said sequence is not yet captured, and 

8 - accepting a captured data packet for processing 7 if a data packet 

9 containing the information fragment immediately preceding the information fragments 

10 of said captured data packet in said sequence is already processed, whereby each 

1 1 information fragment of said sequence is processed only once. 

1 28. [previously amended] A method according to claim 25, wherein said sequence of 

2 information fragments is a sequence of octets of data according to the Transfer Control 

3 Protocol. 

1 29. [currently amended] A computer readable medium having stored thereon computer 

2 readable code comprising the program code means recited below which, when executed by a 

3 computer, cause said computer to execute the functions recited below: eoftwaro ont i ty for 

4 hand li ng data paokots, oa i d data paokoto bo l ong i ng to a oot of data paokoto, ca i d ooftwaro 

6 - program code means for capturing data packets, 

7 - program code means for accepting a captured data packet for processing or 

8 declining a captured data packet from processing based on said captured data 

9 packet and data packets captured prior to said captured data packet^ 

10 - program code means for handling said data packets belonging to a set of 

1 1 data packets first in a first node of a cluster of network elements and for maintaining 

1 2 said list of modification commands in said first node, said list enabling modification of 

1 3 captured data packets, 

14 - program code means for transmitting said list of modification commands from 



KOL-019 Suppl Amend 8_06 



1 5 said first node to a second node of a cluster of network elements, 

16 - program code means for declining a captured data packet from processing if 

1 7 said captured data packet is already processed and modification commands induced 

18 by said captured data packet are already determined and maintained in said list of 

1 9 modification commands, 

20 - program code means for modifying said captured data packet based on said 

21 list of modification commands, and 

22 - program code means for releasing the modified captured data packet. 
1 30. [cancelled] 

1 31 . [currently amended] A ooftwaro ontity computer readable medium according to claim 

2 29, further comprising program code means stored on said medium which, when executed bv 

3 a computer, control said computer to perform the additional functions recited below : 

4 - program code means for modifying captured data packets based on said list 

5 of modification commands, and 

6 - program code means for releasing modified captured data packets. 

1 32. [currently amended] A computer readable medium having stored thereon computer 

2 readable code comprising the program code means recited below which, when executed bv a 

3 computer, cause said computer to execute the functions recited below: ooftwaro ont i ty for 

4 proooso i ng data paokoto, oo i d data pookotD bo l ong i ng to o oot of doto paokoto, oo i d ooftwaro 

5 ont i ty bo i ng adaptod to rooo i vo data paokoto, and oa i d ooftwaro ont i ty oompr i o i ng: 

6 - program code means for capturing data packets 7 ; 

7 - program code means for accepting a captured data packet for processing or 

8 declining a captured data packet from processing based on said captured data 
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9 packet and data packets captured prior to said captured data packet; 

10 - program code means for processing received data packets first in a first 

1 1 node of a cluster of network nodes, if said data packets belong to said set of data 

1 2 packets; 

1 3 - program code means for determining a modification command affecting at 

1 4 least received data, as a response to processing said data 7 ; 

1 5 - said program code means for outputtinq ooftworo ont i ty bo i ng odaptod to 

1 6 output said modification command; 

17 - program code means for maintaining said list of modification commands in 

1 8 said first node, said list enabling modification of captured data packets 7 ; 

1 9 - program code means for transmitting said list of modification commands from 

20 said first node to a second node of said cluster of network elements 7 1 

21 - program code means for processing said set of data packets in said second 

22 node after said transmission of said list of modification commands from said first node 

23 to said second node 7 ; 

24 - program code means for declining a captured data packet from processing if 

25 said captured data packet is already processed and modification commands induced 

26 by said captured data packet are already determined and maintained in said list of 

27 modification commands 7 ; 

28 - program code means for modifying said captured data packet based on said 

29 list of modification commands 7 ; and 

30 - program code means for releasing the modified captured data packet. 
1 33. [cancelled] 

1 34. [cancelled] 
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1 35. [currently amended] A network element for handling data packets in a cluster of 

2 network elements, said data packets belonging to a set of data packets, said network 

3 element programmed with computer code means recited below which control said network 

4 element to perform the functions recited below: oomprio i nq 

5 - means for capturing data packets, 

6 - means for accepting a captured data packet for processing or declining a 

7 captured data packet from processing based on said captured data packet and data 

8 packets captured prior to said captured data packet, 

9 - means for maintaining a list of modification commands, said list enabling 

1 0 modification of captured data packets, and 

1 1 - means for transmitting said list of modification commands to a second 

1 2 network element of said cluster of network elements, 

1 3 - means for declining a captured data packet from processing if said captured 

1 4 data packet is already processed and modification commands induced by said 

1 5 captured data packet are already determined and maintained in said list of 

1 6 modification commands, 

1 7 - means for modifying said captured data packet based on said list of 

1 8 modification commands, and 

19 - means for releasing the modified captured data packet. 

1 36. [currently amended] A network element according to claim 35, further comprising 

2 program code means recited below which control said network element to perform the 

3 functions recited below: 

4 - means for processing a captured data packet, and 

5 - means for determining a modification command affecting at least one 
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6 captured data packet as a response to processing said at least one captured data 

7 packet. 

1 37. [currently amended] A network element cluster comprised of a plurality of nodes for 

2 handling data packets, said data packets belonging to a set of data packets, at least one 

3 node of said network element cluster including program code which programs said node to 

4 provide the following structural elements: compr i s i ng: 

5 - means for capturing data packets, 

6 - means for accepting a captured data packet for processing or declining a 

7 captured data packet from processing based on said captured data packet and data 

8 packets captured prior to said captured data packet^ 

9 - means for maintaining a list of modification commands, said list enabling 

1 0 modification of captured data packets, 

1 1 - means for transmitting said list of modification commands from said node to 

1 2 another node of said cluster of network elements, 

1 3 - means for declining a captured data packet from processing, if said 

1 4 captured data packet is already processed and modification commands induced by 

1 5 said captured data packet are already determined and maintained in said list of 

1 6 modification commands, 

1 7 - means for modifying said captured data packet based on said list of . 

1 8 modification commands, and 

1 9 - means for releasing the modified captured data packet. 
1 38. [cancelled] 

1 39. [currently amended] A computer readable medium storing program code which, when 
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2 executed by a computer, controls said computer to handle otorago mod i um oarrv i ng a 

3 oomputor oxooutab l o coftwaro ont i ty for hand li ng data packets, said data packets belonging 

4 to a set of data packets, said program code ooftworo ont i ty comprising: 

5 - program code configured to control said computer to capture data packets, 

6 - program code configured to control said computer to accept a captured data 

7 packet for processing based on said captured data packet and data packets 

8 captured prior to said captured data packet, 

9 - program code configured to control said computer to . when processing at 

1 0 least one captured data packet accepted for processing, determine a modification 

1 1 command affecting at least said at least one captured data packet, 

1 2 - program code configured to control said computer to maintain a list of 

1 3 modification commands, said list enabling modification of captured data packets, 

1 4 - program code configured to control said computer to decline a captured 

1 5 data packet from processing, if said captured data packet is already processed and 

1 6 modification commands induced by said captured data packet are already 

1 7 determined and maintained in said list of modification commands, 

1 8 - program code configured to control said computer to modify said captured 

1 9 data packet based on said list of modification commands, and 

20 - program code configured to control said computer to release the modified 

21 captured data packet. 

1 40. [currently amended] A computer-readable medium storing program code which, when 

2 executed by a computer, controls said computer to handle storaoo mod i um oarrv i ng a 

3 oomputor oxooutab l o ooftworo ont i ty for hand li ng data packets, said data packets belonging 

4 to a set of data packets having at least partly hierarchical structure, said program code 

5 coftwaro ont i ty comprising: 
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6 - program code configured to control said computer to capture data packets, 

7 - program code configured to control said computer to accept a captured data 

8 packet for processing or declining a captured data packet from processing based on 

9 said captured data packet and data packets captured prior to said captured data 

10 packet such that data packets are accepted for processing in the order specified by 

1 1 said at least partly hierarchical structure 

1 2 - program code configured to control said computer to decline a captured 

1 3 data packet from processing, if a data packet immediately preceding said captured 

1 4 data packet in said at least partly hierarchical structure is not yet captured, 

15 - program code configured to control said computer to delay data packets 

1 6 declined from processing, 

1 7 - program code configured to control said computer to accept a delayed data 

1 8 packet for processing and processing said delayed data packet, if data packet(s) 

19 immediately preceding said delayed data packet in said at least partly hierarchical 

20 structure is(are) already processed, and 

21 - program code configured to control said computer to release the delayed 

22 data packet. 

1 41 . [currently amended] A computer-readable medium storing program code, which when 

2 executed by a computer, controls said computer to handle storaoo mod i um parry i ng a 

3 Gomputor oxooutab l o ooftwaro ont i ty for hand li ng data packets, said data packets belonging 

4 to a set of data packets and forming a plurality of groups of data packets, said program code 

5 ooftwaro ont i ty comprising: 

6 - program code configured to control said computer to capture data packets, 

7 - program code configured to control said computer to decline a captured 

8 data packet belonging to a first group of data packets from processing if all other 
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9 data packets belonging to said first group of data packets are not yet captured, and 

10 delaying said captured data packet, and 

1 1 - program code configured to control said computer to process a captured 

1 2 data packet belonging to a first group of data packets together with delayed data 

1 3 packets belonging to said first group of data packets if said captured data packet 

1 4 belonging to said first group and said delayed data packets belonging to said first 

1 5 group form a full first group of data packets. 

1 42. [currently amended] A computer-readable medium storing program code which, when 

2 executed by a computer, causes said computer to handle otorogo mod i um parry i ng o 

3 oomputor oxooutab l o ooftworo ont i ty for hand li ng data packets, said data packets belonging 

4 to a set of data packets and forming a plurality of groups of data packets, said program code 

5 softwaro ont i ty comprising: 

6 - program code configured to control said computer to capture data packets, 

7 said data packets containing information fragments belonging to a sequence of 

8 information fragments, 

9 - program code configured to control said computer to decline a captured 

1 0 data packet from processing, if a data packet containing the information fragment 

1 1 immediately preceding the information fragments of said captured data packet in said 

1 2 sequence is not yet captured, and 

1 3 - program code configured to control said computer to accept a captured 

1 4 data packet for processing if a data packet containing the information fragment 

1 5 immediately preceding the information fragments of said captured data packet in said 

1 6 sequence is already processed, whereby each information fragment of said 

1 7 sequence is processed only once. 
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1 43. [currently amended] A network element for handling data packets, said network 

2 element comprising a machine whose functions are at least partially controlled by program 

3 code, said program code comprising: 

4 - program code configuring said the network element to capture data packets, 

5 said data packets belonging to a set of data packets, 

6 - program code configuring said the network element to accept a captured 

7 data packet for processing based on said captured data packet and data packets 

8 captured prior to said captured data packet, 

9 - program code configuring said the network element to, when processing at 

1 0 least one captured data packet accepted for processing, determine a modification 

1 1 command affecting at least said at least one captured data packet, 

12 - program code configuring said the network element to maintain a list of 

1 3 modification commands, said list enabling modification of captured data packets, 

1 4 - program code configuring said the network element to decline a captured 

1 5 data packet from processing if said captured data packet is already processed and 

1 6 modification commands induced by said captured data packet are already 

1 7 determined and maintained in said list of modification commands, 

1 8 - program code configuring said the network element to modify said captured 

19 data packet based on said list of modification commands, and 

20 - program code configuring said the network element to release the modified 

21 captured data packet. 

1 44. [currently amended] A network element for handling data packets, said network 

2 element comprising a machine whose functions are at least partially controlled by program 

3 code, said program code comprising: 

4 - program code configuring said the network element to capture data packets, 
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5 said data packets belonging to a set of data packets having at least partly 

6 hierarchical structure, 

7 - program code configuring said the network element to accept a captured 

8 data packet for processing or declining a captured data packet from processing 

9 based on said captured data packet and data packets captured prior to said 

10 captured data packet such that data packets are accepted for processing in the 

1 1 order specified by said at least partly hierarchical structure 

1 2 - program code configuring said the network element to decline a captured 

1 3 data packet from processing if a data packet immediately preceding said captured 

1 4 data packet in said at least partly hierarchical structure is not yet captured, 

1 5 - program code configuring said the network element to delay data packets 

1 6 declined from processing, 

1 7 - program code configuring said the network element to accept a delayed 

1 8 data packet for processing and processing said delayed data packet if data packet(s) 

1 9 immediately preceding said delayed data packet in said at least partly hierarchical 

20 structure is(are) already processed, and 

21 - program code configuring said the network element to release the delayed 

22 data packet. 

1 45. [currently amended] A network element for handling data packets, said network element 

2 comprising a machine whose functions are at least partially controlled by program code, said 

3 program code comprising: 

4 - program code configuring said the network element to capture data packets, 

5 said data packets belonging to a set of data packets and forming a plurality of 

6 groups of data packets, 

7 - program code configuring said the network element to decline a captured 
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8 data packet belonging to a first group of data packets from processing 7 if all other 

9 data packets belonging to said first group of data packets are not yet captured, and 

10 delaying said captured data packet, and 

11 - program code configuring said the network element to process a captured 

1 2 data packet belonging to a first group of data packets together with delayed data 

1 3 packets belonging to said first group of data packets 7 if said captured data packet 

1 4 belonging to said first group and said delayed data packets belonging to said first 

1 5 group form a full first group of data packets. 

1 46. [currently amended] A network element for handling data packets, said network element 

2 comprising a machine whose functions are at least partially controlled by program code, said 

3 program code comprising:- - 

4 - program code configuring said the network element to capture data packets, 

5 said data packets belonging to a set of data packets and forming a plurality of 

6 groups of data packets and containing information fragments belonging to a 

7 sequence of information fragments, 

8 - program code configuring said the network element to decline a captured 

9 data packet from processing 7 if a 'data packet containing the information fragment 

10 immediately preceding the information fragments of said captured data packet in said 

1 1 sequence is not yet captured, and 

1 2 - program code configuring said the network element to accept a captured 

1 3 data packet for processing if a data packet containing the information fragment 

1 4 immediately preceding the information fragments of said captured data packet in said 

1 5 sequence is already processed, whereby each information fragment of said 

1 6 sequence is processed only once. 
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